Can you please expand on that? I am also having this issue, but it's not due to a misspelling, that I can see.
The error is on the following line:
<search index="windows" Account_Name="$Locked_Out_Account_Name$" EventCode="4624">
If I change the <search index= to <search ref= than it works fine. However, I want to perform a direct search here because I want to reference the previously created variable $Locked_Out_Account_Name$. Perhaps there's a way to push the variable in a referenced report and search with it there?
Here's the full code:
<form refresh="60">
<label>Account PC (Test 11.21) Dashboard</label>
<description>Blah.</description>
<fieldset submitButton="false">
<input type="dropdown" token="Locked_Out_Account_Name" searchWhenChanged="true" depends="$justHideMe$">
<label>Locked_Out_Account_Name</label>
<search ref="Account PC (Test 11.21) Report">
<earliest>-1h</earliest>
<latest>now</latest>
</search>
<fieldForLabel>Locked_Out_Account_Name</fieldForLabel>
<fieldForValue>Locked_Out_Account_Name</fieldForValue>
<selectFirstChoice>true</selectFirstChoice>
</input>
</fieldset>
<row>
<panel>
<html>
<font size="5">
<body1>Last Refresh Time</body1>
<body2>$time$</body2>
<body3>$Locked_Out_Account_Name$</body3>
</font>
<style>
table thead tr th, td{
font-size:175% !important;
}
</style>
</html>
<table>
<title>Account PC (Test 11.21) Report</title>
<search ref="Account PC (Test 11.21) Report">
<done>
<eval token="time">strftime(now(),"%m/%d/%Y %H:%M:%S")</eval>
</done>
<earliest>-1h</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
</table>
</panel>
</row>
</form>
